My firewall (ZAP) identified runndll.exe as a virus. Doing a Google search I learned that rundll.exe is not part of Win XP, as it was with win 98 and Me.
This dll was running on my isntallation and I killed it. So far nothing noticed. I also note that rundll32 is running on another pc, but not on my laptop--all running WinXP.
Anybody run into this? Any ideas? MS's web site explains the use of this dll, but doesn't talk about misuse by spyware, at least that I noted in a quick look.
The following is from one of the Google sites I found.
Process File:
rundll.exe
Process Name:
Microsoft RunDLL
Description:
rundll.exe is a Windows System process belonging to the Windows 95, 98 and ME range of Microsoft Windows products. This is an important system process and should not be terminated.
NOTE: rundll.exe can also be the LOXOSCAM and Backdoor.SchoolBus.B trojans depending on Operating System and file path; this is always a virus on Windows XP and 2000 operating systems however. Both are a backdoor Trojan that allow hackers to gain access to the computer. These program is a registered security risk and should be removed immediately. If found on your system make sure that you have downloaded the latest update for your antivirus application. Please consult the file path to distinguish between this and the system process.
rikytik 
Threaded Mode
